CVEs published by sba-research

CVEs published by sba-research (CVE Numbering Authority). 6 tracked.

CVE-2026-18362 MEDIUM 5.9 The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication agains
CVE-2026-16969 HIGH 7.6 The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (X
CVE-2026-16971 MEDIUM 5.9 The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against bru
CVE-2026-18360 HIGH 7.6 The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (X
CVE-2026-18361 HIGH 7.6 The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (X
CVE-2026-16970 MEDIUM 4.2 The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffe